a02926d54c03beb36b318f1a5ca3cc7f8bbf01110aa8c9c9a98dd04464e2a0b5

Analysis

max time kernel
150s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
14/05/2024, 09:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
Size

97KB
MD5

bef8d6ab4b5a212dd078912668f83360
SHA1

fc9e510bf0783d3858079b1ba0f0bee0f219ddab
SHA256

a02926d54c03beb36b318f1a5ca3cc7f8bbf01110aa8c9c9a98dd04464e2a0b5
SHA512

67932f604431fd68628c34410afcb5f5a444262d56cd207cf6ba0669086521b3ef8806021c3cf412e02453fd612360825f64ed5eb75f043813de563a8c48c2c5
SSDEEP

3072:6rWpcOPxPke+e3fFpsJOfFpsJbgEjEYnEYy:tFPxPke+eIjnnny

Score

9^/10

ransomware

Malware Config

Signatures

Renames multiple (3442) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\InkWatson.exe.mui.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\fr-FR\OmdProject.dll.mui.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\bandwidth.png.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\1047x576black.png.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Pacific\Tongatapu.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Mozilla Firefox\browser\features\[email protected]	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Mozilla Firefox\plugin-container.exe.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\AddMeasure.dot.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Lindeman.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Africa\Maputo.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\ja\System.Windows.Presentation.resources.dll.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\dialogs\browse_window.html.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Windows Journal\de-DE\jnwmon.dll.mui.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_dts_plugin.dll.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\mshwgst.dll.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\chrome.dll.sig.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Internet Explorer\en-US\F12Resources.dll.mui.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\org-netbeans-modules-templates.xml_hidden.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\ja\System.Xml.Linq.Resources.dll.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libremap_plugin.dll.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\audio_filter\libspatializer_plugin.dll.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\packetizer\libpacketizer_flac_plugin.dll.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Stationery\Bears.htm.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\navSubpicture.png.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\currency.data.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.httpclient4.ssl.feature_1.0.0.v20140827-1444\epl-v10.html.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Jamaica.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Windows Media Player\en-US\setup_wm.exe.mui.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\7-Zip\Lang\lt.txt.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\rectangle_photo_Thumbnail.bmp.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\bin\javap.exe.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\javax.xml_1.3.4.v201005080400.jar.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-compat.xml.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\Pacific\Gambier.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\misc\libgnutls_plugin.dll.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Sports\SportsMainToNotesBackground.wmv.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\mr.pak.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\messages_pt_BR.properties.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Monrovia.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Australia\Currie.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.alert_5.5.0.165303.jar.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\ja\UIAutomationProvider.resources.dll.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\DVD Maker\Shared\DvdStyles\Travel\btn-previous-static.png.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Argentina\Ushuaia.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-keyring-fallback.xml.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-masterfs-nio2.xml.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Checkers\fr-FR\chkrzm.exe.mui.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\db\lib\derbyLocale_ko_KR.jar.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Metlakatla.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-netbeans-modules-options-api.xml.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Minesweeper\fr-FR\Minesweeper.exe.mui.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Microsoft Games\Multiplayer\Backgammon\fr-FR\bckgzm.exe.mui.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\fr\System.Data.Services.resources.dll.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\System.Windows.Presentation.dll.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\bn.pak.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-actions_ja.jar.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Java\jre7\lib\zi\America\Argentina\Jujuy.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\FrameworkList.xml.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\lua\sd\icecast.luac.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\stream_out\libstream_out_chromecast_plugin.dll.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\Ole DB\de-DE\msdasqlr.dll.mui.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Common Files\System\Ole DB\en-US\sqlxmlx.rll.mui.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.jetty.server_8.1.14.v20131031.jar.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.attributeTransformation.exsd.tmp	bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe

C:\Users\Admin\AppData\Local\Temp\bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe
"C:\Users\Admin\AppData\Local\Temp\bef8d6ab4b5a212dd078912668f83360_NeikiAnalytics.exe"
1⤵
- Drops file in Program Files directory
PID:1748

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-3627615824-4061627003-3019543961-1000\desktop.ini.tmp

Filesize
97KB

MD5
eab7a8227310c62ac46dca3d4c464524

SHA1
e0100b59881f824e558d7010854af03078208992

SHA256
e31465bc8aa386a2c2844575263a5a5e4d36248a859dd0e6ba3a98d69cdd85fc

SHA512
d84e1a83a11eae198c089938007e41a4122b25c3ceba4ddef752b3b70c7df62aec7c49fc9a0d617d63008ff718e972ff9a72a60b109798cc1980b2f1c457e5df

Download Submit
C:\MSOCache\All Users\{90140000-0011-0000-0000-0000000FF1CE}-C\Office64WW.xml.tmp

Filesize
106KB

MD5
e79048c48121940ed0fd3ee784780b79

SHA1
967505b50d09786d0f50eaebd6f23e50cd2ca153

SHA256
fb694f2d5807067828192b3d9197cd058d3a3a18ab420b71e02f3a5cdf52730b

SHA512
1463231b68833b04e5c126e41708d1392eddbe95e79f8d01ba11326740d0e034c366e9638e1787b0915e09e2632853428c436ba536bae8736b58d8c2cf696e3e

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads